$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json) Hash identifier: 3xMuCcTV1HKe7StZ0+J+xr5bue0zsI7IPMo7Yy2jETI= Subject key identifier: CF:15:51:4E:E4:82:A4:4B:0A:B7:AD:3F:40:5B:BB:9E:2A:E8:78:31 Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft Manifest number: 01CB Signing time: Sun 01 Mar 2026 23:56:51 +0000 Manifest this update: Sun 01 Mar 2026 23:56:47 +0000 Manifest next update: Sun 08 Mar 2026 23:56:47 +0000 Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: wVh2ZTCO+eRLOr59sndmv2EolZsM+ANp4RB71DV2m+Q=) 2: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=) 3: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=) 4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Validity Not Before: Mar 1 23:56:47 2026 GMT Not After : Mar 8 23:56:47 2026 GMT Subject: CN=69a4d242-c976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:e6:c3:df:cc:f8:bc:26:a0:43:b1:18:41: 34:e9:39:13:9a:b1:29:35:ce:7b:f0:24:06:c7:2b: 3d:c2:76:79:e9:45:c2:a5:9f:55:f2:3f:31:1f:a8: 72:8d:4c:bc:7c:c8:9f:17:bf:6f:fc:75:57:2a:c8: 3e:42:45:64:04:af:a5:ea:4e:3b:b8:aa:f1:bd:61: 22:a3:d1:9b:45:f0:6d:b9:ef:28:f4:37:5d:1c:ec: 90:16:5e:b3:bc:47:97:0b:b9:a8:b1:f4:de:a0:c1: a7:e8:ff:e7:80:be:39:76:0d:d7:d4:65:dc:04:b0: c9:9d:4a:41:ef:7a:22:58:9d:0b:85:0f:bb:e3:da: 3c:af:c8:59:2c:9c:81:62:72:ec:c5:64:7a:63:67: 01:70:48:c4:94:10:b4:16:f9:87:5b:63:93:90:43: 2f:f3:31:08:5a:48:49:3d:bf:dd:30:4f:a4:6c:e4: 0a:e8:64:ab:08:33:bf:86:31:99:c0:10:a1:0c:6c: 02:07:72:77:78:d4:8f:82:7a:69:66:ad:82:51:8c: 91:f6:96:2f:f9:9b:9f:46:f9:d7:78:e7:33:c3:f5: 01:7e:b1:54:a2:a2:6b:a7:4d:9c:e6:6a:0f:c4:d2: 76:1e:0d:2d:c4:10:76:86:9a:a9:f9:b5:2b:82:ad: 7a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:15:51:4E:E4:82:A4:4B:0A:B7:AD:3F:40:5B:BB:9E:2A:E8:78:31 X509v3 Authority Key Identifier: keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7d:6c:6b:41:24:14:c6:ad:c9:76:10:87:a9:64:db:95:de: 1a:20:a0:02:1e:af:95:f9:78:41:fb:6e:7c:3d:82:53:37:f1: 09:78:c9:1a:0f:4b:a7:d5:d5:86:74:c8:05:38:9f:32:c7:99: c3:e0:28:88:30:04:39:9a:8b:2e:67:cb:67:d9:0c:7e:77:fe: fd:0a:a5:c8:98:e2:0e:a0:e1:89:9a:9c:6d:9e:ea:ca:3e:df: 14:f7:b5:d2:05:2b:7f:9c:30:cb:80:dc:39:67:fd:e8:f2:58: 0a:75:e5:e0:40:46:54:22:f2:11:3f:e7:88:b6:24:78:5b:9f: ae:28:1d:6e:69:f4:b0:15:52:7e:2f:53:85:98:6f:bc:06:ca: 73:31:4a:86:93:1d:0d:64:21:24:f8:02:c1:12:f5:ed:03:7f: 6e:0f:9f:98:79:fb:4d:8a:cc:ac:78:58:51:2c:0d:3e:11:c5: de:1b:5b:fd:b1:bd:65:5a:c9:53:0a:0b:29:45:59:92:17:e1: f4:4b:47:0b:be:68:fb:2e:79:42:f7:ce:d5:e9:30:d0:c5:5a: fc:5b:f5:82:4c:f0:64:ab:66:7f:08:57:7a:15:d7:4d:90:8f: 5f:21:a4:09:75:ba:d5:b6:41:3d:e9:c9:d6:74:65:67:8e:91: 27:30:53:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKERGNTE0NzBCMTVFOEMxNDFBRjJGQTg0NkEyOEMwM0Iz ODU5MUJBQjQwHhcNMjYwMzAxMjM1NjQ3WhcNMjYwMzA4MjM1NjQ3WjAYMRYwFAYD VQQDEw02OWE0ZDI0Mi1jOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SDmw9/M+LwmoEOxGEE06TkTmrEpNc578CQGxys9wnZ56UXCpZ9V8j8xH6hy jUy8fMifF79v/HVXKsg+QkVkBK+l6k47uKrxvWEio9GbRfBtue8o9DddHOyQFl6z vEeXC7mosfTeoMGn6P/ngL45dg3X1GXcBLDJnUpB73oiWJ0LhQ+749o8r8hZLJyB YnLsxWR6Y2cBcEjElBC0FvmHW2OTkEMv8zEIWkhJPb/dME+kbOQK6GSrCDO/hjGZ wBChDGwCB3J3eNSPgnppZq2CUYyR9pYv+ZufRvnXeOczw/UBfrFUoqJrp02c5moP xNJ2Hg0txBB2hpqp+bUrgq163wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8VUU7k gqRLCretP0Bbu54q6HgxMB8GA1UdIwQYMBaAFN9RRwsV6MFBry+oRqKMA7OFkbq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FOTlFN0Y1MjZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dVR3ZMNmhHb293RHM0V1J1 clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRkhDeFhvd1VHdkw2aEdvb3dEczRXUnVyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FOTlFN0Y1MjZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dV R3ZMNmhHb293RHM0V1J1clEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAen1sa0EkFMatyXYQh6lk25XeGiCgAh6vlfl4QftufD2CUzfxCXjJGg9Lp9XV hnTIBTifMseZw+AoiDAEOZqLLmfLZ9kMfnf+/QqlyJjiDqDhiZqcbZ7qyj7fFPe1 0gUrf5wwy4DcOWf96PJYCnXl4EBGVCLyET/niLYkeFufrigdbmn0sBVSfi9ThZhv vAbKczFKhpMdDWQhJPgCwRL17QN/bg+fmHn7TYrMrHhYUSwNPhHF3htb/bG9ZVrJ UwoLKUVZkhfh9EtHC75o+y55QvfO1ekw0MVa/Fv1gkzwZKtmfwhXehXXTZCPXyGk CXW61bZBPenJ1nRlZ46RJzBTjQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:00:26 2026 by rpki-client